Skip to content

ci(dependabot): ignore mcp major updates and update the explorer UI's npm packages - #191

Merged
AlexS-scale merged 1 commit into
mainfrom
AlexS/dependabot-mcp-and-ui
Oct 14, 2026
Merged

AlexS-scale merged 1 commit into
mainfrom
AlexS/dependabot-mcp-and-ui

Conversation

@AlexS-scale

@AlexS-scale AlexS-scale commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

What and why

Dependabot fails on each push to main (last failure). It tries again to update #34 (mcp 1.28.1 to 2.3.0), but that update cannot resolve: the dev extra's fastmcp needs mcp<2. Also, mcp 2 removed mcp.server.fastmcp, which env/gateway imports.

  • Ignore major updates of mcp. Minor and patch updates of mcp continue.
  • Add the npm ecosystem for src/agent_env/explorer/ui. Before this change, Dependabot did not update the explorer UI's packages. Minor and patch updates come in one group, as for Python.

After merge, close #34.

How it was tested

  • .github/dependabot.yml is valid against the SchemaStore dependabot-2.0 schema. The same check rejects an incorrect update-types value.
  • GitHub validates the file again when it reaches main.

@AlexS-scale
AlexS-scale requested a review from a team as a code owner October 14, 2026 05:00
@AlexS-scale
AlexS-scale merged commit de34fa4 into main Oct 14, 2026
14 checks passed
@AlexS-scale
AlexS-scale deleted the AlexS/dependabot-mcp-and-ui branch October 14, 2026 17:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants